Behavioral task
behavioral1
Sample
233494609e48c010ec4b995e91bb7180N.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
233494609e48c010ec4b995e91bb7180N.exe
Resource
win10v2004-20240802-en
General
-
Target
233494609e48c010ec4b995e91bb7180N.exe
-
Size
30KB
-
MD5
233494609e48c010ec4b995e91bb7180
-
SHA1
45dec36e910df95dde3866d5c01f1231de2ef350
-
SHA256
594a1fd6fe18877380ec08240e7f3638e50f3b7175df9b088ca1c6cefe9d2d5c
-
SHA512
0c09ff05204fd92f626a64b834dda542c4a100b9a37295aba359c999f66d561720fa1fe4e5f7ada0ccf236c5cd71cf12f0b5609b59c06b920cf8cccf152780dc
-
SSDEEP
768:kBT37CPKKdJJBZBZaOAOIB3jM2jMO/7OSz:CTW7JJB7LD2I2IbSz
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 233494609e48c010ec4b995e91bb7180N.exe unpack001/out.upx
Files
-
233494609e48c010ec4b995e91bb7180N.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 352B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ